Lucene search
+L

124 matches found

OSV
OSV
added 2018/12/04 9:29 a.m.27 views

CVE-2018-19838

In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENTASTOPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone, cloneChildren, and copy...

6.5CVSS6.5AI score
Exploits0References4
OSV
OSV
added 2018/12/04 9:29 a.m.4 views

UBUNTU-CVE-2018-19838

In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENTASTOPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone, cloneChildren, and copy...

6.5CVSS7.3AI score0.01937EPSS
Exploits1References2
Cvelist
Cvelist
added 2018/12/04 9:0 a.m.21 views

CVE-2018-19838

In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENTASTOPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone, cloneChildren, and copy...

6.8AI score0.01937EPSS
Exploits1References4
NVD
NVD
added 2018/10/04 11:29 p.m.21 views

CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

5.5CVSS6.1AI score0.01291EPSS
Exploits0References5
CVE
CVE
added 2018/10/04 11:0 p.m.170 views

CVE-2018-17985

CVE-2018-17985 is a stack consumption vulnerability in GNU Binutils (libiberty), observed in cp-demangle.c with cplus_demangle_type performing recursive calls when many 'P' characters occur. The Astra Linux advisory mirrors this description, noting the issue in Binutils 2.31. The provided documen...

5.5CVSS6AI score0.01291EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2018/10/04 11:0 p.m.25 views

CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

6.1AI score0.01291EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2018/10/04 11:0 p.m.36 views

CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplusdemangletype function making recursive calls to itself in certain scenarios involving many 'P' characters...

5.5CVSS6.3AI score0.01291EPSS
Exploits0
OSV
OSV
added 2018/03/30 8:29 a.m.3 views

DEBIAN-CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

5.5CVSS8.5AI score0.01073EPSS
Exploits0References1
Veracode
Veracode
added 2017/02/07 2:22 a.m.44 views

Denial Of Service (DoS) Through Null Pointer Dereference

OpenSSL is vulnerable to denial of service DoS attacks. These attacks are possible when SSLMODERELEASEBUFFERS is enabled because OpenSSL does not correctly manage a buffer point during recursive calls...

4.3CVSS7.2AI score0.43828EPSS
Exploits0References113Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/11/26 12:0 a.m.46 views

OracleVM 3.3 : glibc (OVMSA-2014-0017)

The remote OracleVM system is missing necessary patches to address critical security updates : - Remove gconv transliteration loadable modules support CVE-2014-5119, - nlfindlocale: Improve handling of crafted locale names CVE-2014-0475, - Don't use alloca in addgetnetgrentX 1087789. - Adjust...

7.5CVSS7.6AI score0.18099EPSS
Exploits6References5
NVD
NVD
added 2014/09/30 4:55 p.m.27 views

CVE-2014-4330

The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DDdump...

2.1CVSS7.2AI score0.00554EPSS
Exploits3References16
OSV
OSV
added 2014/09/30 4:55 p.m.8 views

CVE-2014-4330

The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DDdump...

6.1AI score
Exploits0References16
Debian CVE
Debian CVE
added 2014/09/30 4:0 p.m.77 views

CVE-2014-4330

The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service stack consumption and crash via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DDdump...

2.1CVSS7AI score0.00554EPSS
Exploits3
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.11 views

Solaris <= 7.0 Recursive mutex_enter Panic Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/655/info A vulnerability in Solaris TCP/IP stack may allow remote users to panic the system. If the nmap network mapping utility is used with the OS fingerprinting option '-O' against an active listening port and the serv...

7.1AI score
Exploits0
OSV
OSV
added 2012/06/27 9:55 p.m.5 views

CVE-2011-4957

The makeclickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service crash via a comment with a crafted URL that triggers many recursive calls...

6.3AI score
Exploits0References7
UbuntuCve
UbuntuCve
added 2012/06/27 9:55 p.m.31 views

CVE-2011-4957

The makeclickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service crash via a comment with a crafted URL that triggers many recursive calls...

5CVSS5.9AI score0.03155EPSS
Exploits0References2
NVD
NVD
added 2010/10/23 8:39 p.m.20 views

CVE-2010-4055

Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service memory consumption and daemon crash by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain...

5CVSS6.4AI score0.07175EPSS
Exploits1References6
Prion
Prion
added 2010/10/23 8:39 p.m.18 views

Design/Logic Flaw

Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service memory consumption and daemon crash by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain...

5CVSS6.9AI score0.07175EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2010/10/22 10:0 p.m.56 views

CVE-2010-4055

IBM solidDB vulnerability CVE-2010-4055 affects solidDB 6.5.0.3 and earlier. The issue arises from processing a TCP packet sent to port 1315 that contains many integer fields, which triggers many recursive calls and leads to excessive stack/memory consumption and a daemon crash (DoS). Connected N...

5CVSS6.5AI score0.07175EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2010/10/22 10:0 p.m.27 views

CVE-2010-4055

Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service memory consumption and daemon crash by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain...

6.3AI score0.07175EPSS
Exploits1References6
Rows per page
Query Builder